CVE-2018-12246
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2018-12246
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Symantec Web Isolation (WI) 1.11 prior to 1.11.21 is susceptible to a reflected cross-site scripting (XSS) vulnerability. A remote attacker can target end users protected by WI with social engineering attacks using crafted URLs for legitimate web sites. A successful attack allows injecting malicious JavaScript code into the website's rendered copy running inside the end user's web browser. It does not allow injecting code into the real (isolated) copy of the website running on the WI Threat Isolation Engine.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Symantec Web Isolation 跨站脚本漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Symantec Web Isolation是美国赛门铁克（Symantec）公司的一款Web安全防护软件。该软件主要用于防止恶意软件和网络钓鱼攻击等。 Symantec Web Isolation 1.11.21之前的1.11版本中存在跨站脚本漏洞。远程攻击者可借助特制的URLs实施社会工程攻击利用该漏洞在用户的Web浏览器中执行任意脚本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Symantec Corporation | Symantec Web Isolation | 1.11 prior to 1.11.21 | - |
II. Public POCs for CVE-2018-12246
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2018-12246
请登录查看更多情报信息。
- https://support.symantec.com/content/unifiedweb/en_US/article.SYMSA1464.htmlx_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2018-12246
IV. Related Vulnerabilities
V. Comments for CVE-2018-12246
No comments yet